
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
File: DSkZIlh_dQ94oZeVy9ibxymvF9U.mft (raw, json)
Hash identifier: GO1i9koxBgTAXXWqE641RwLuUP3mxNTm87m8L67zUDU=
Subject key identifier: 0C:79:2F:0D:8C:98:AF:2F:17:77:73:B1:D4:65:2C:FC:F0:8C:34:7B
Authority key identifier: 0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
Certificate issuer: /CN=0d291922587f750f78a19795cbd89bc729af17d5
Certificate serial: 01987C0A15BBD99BA3F8E4A0860EE780B5CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
Manifest number: 1293
Signing time: Tue 05 Aug 2025 21:01:32 +0000
Manifest this update: Tue 05 Aug 2025 21:01:32 +0000
Manifest next update: Wed 06 Aug 2025 21:01:32 +0000
Files and hashes: 1: 1g3YzsLZ5QOCf6qi-eFi1LVqHQ8.roa (hash: +wFJ5tj+lSmxnwgEedsXBX4o8rthXQtXpU++hvEpCkM=)
2: DSkZIlh_dQ94oZeVy9ibxymvF9U.crl (hash: PuQXTv8uFqLKuy9sbOgbZCOxyG6hVw5XHmBFqz4wgz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 21:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:0a:15:bb:d9:9b:a3:f8:e4:a0:86:0e:e7:80:b5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d291922587f750f78a19795cbd89bc729af17d5
Validity
Not Before: Aug 5 21:01:32 2025 GMT
Not After : Aug 6 21:01:32 2025 GMT
Subject: CN=0c792f0d8c98af2f177773b1d4652cfcf08c347b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7c:59:ee:91:3a:99:da:70:47:08:69:3b:be:
44:13:7d:7e:a3:6a:80:b0:5b:e6:04:7b:c1:ae:2b:
55:5b:1c:02:8b:0c:c3:53:16:d8:62:c0:d3:f0:c8:
43:39:af:13:16:bc:7d:d4:96:00:6b:19:f2:81:1c:
a6:62:46:86:e9:9e:2c:42:95:c3:46:c2:ee:a8:d1:
ca:a2:55:58:c2:17:9b:c0:f9:a8:39:05:f7:a1:6e:
54:31:c0:f2:ef:e3:49:e4:31:65:f6:55:68:21:ae:
01:85:b8:89:86:ed:f8:0a:54:f3:81:4a:76:c5:f9:
88:26:06:52:50:bd:79:ab:bd:07:cc:97:fd:34:e4:
14:6a:80:a0:e3:4d:8e:7f:d3:8c:cc:8b:b4:b0:04:
63:e7:79:0b:35:cd:97:39:ab:c8:68:73:b3:f5:46:
6f:5c:d2:9d:4d:09:a0:39:5e:e4:30:a1:28:9f:b6:
7a:f2:c8:5b:55:21:c4:4d:cb:fd:50:da:c0:36:71:
8c:0b:58:13:be:10:2e:12:3d:b8:4f:a9:ad:07:73:
4d:7e:fb:66:42:24:1e:89:17:40:cd:ea:93:1b:a1:
7b:7f:da:36:d7:6d:8c:31:2c:c7:d0:e2:ac:61:45:
d4:57:8b:4f:e3:d5:40:64:82:8c:a6:dc:6e:79:bb:
ec:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:79:2F:0D:8C:98:AF:2F:17:77:73:B1:D4:65:2C:FC:F0:8C:34:7B
X509v3 Authority Key Identifier:
keyid:0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:18:f0:db:f3:c4:3b:05:a3:19:cb:4d:4c:2c:a3:c9:22:1d:
3e:01:d0:31:2d:cd:33:98:25:b3:5f:5d:87:a6:0f:ff:a8:1f:
08:ca:8f:4d:24:d6:b8:0d:6f:54:cd:cb:4b:bd:86:9b:35:86:
34:ae:f8:ae:5e:ca:95:20:c5:17:cf:a2:75:d1:32:56:2c:ac:
aa:91:38:03:45:57:0a:a6:07:e0:1a:be:c6:31:f5:17:f0:42:
37:d5:aa:39:91:2e:d6:55:20:a6:83:c0:49:6f:17:23:92:c9:
7b:38:03:cf:d4:cd:f9:24:b0:12:0c:1d:b5:1c:28:8f:ba:99:
7d:fd:60:00:a4:e7:90:dc:23:70:22:cb:90:a1:7b:34:1c:56:
73:d3:53:93:70:29:a1:89:6d:69:6c:e0:ca:25:21:12:7f:ad:
73:ed:16:81:30:38:a8:46:c2:90:2d:1a:21:95:01:1f:68:cd:
b9:52:5f:47:f7:73:01:f2:7d:b2:93:63:bc:1a:49:df:0f:14:
33:41:33:46:87:6e:96:57:fc:fc:ea:d1:b3:7c:a1:eb:98:14:
a2:f6:55:b4:4f:74:26:eb:85:88:ed:39:e9:07:2e:ad:24:47:
20:ae:8f:d6:aa:ea:f4:ab:cd:0a:07:4c:8d:84:79:66:ec:96:
24:4a:d0:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8ChW72Zuj+OSghg7ngLXMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjkxOTIyNTg3Zjc1MGY3OGExOTc5NWNiZDg5YmM3Mjlh
ZjE3ZDUwHhcNMjUwODA1MjEwMTMyWhcNMjUwODA2MjEwMTMyWjAzMTEwLwYDVQQD
EygwYzc5MmYwZDhjOThhZjJmMTc3NzczYjFkNDY1MmNmY2YwOGMzNDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnxZ7pE6mdpwRwhpO75EE31+o2qA
sFvmBHvBritVWxwCiwzDUxbYYsDT8MhDOa8TFrx91JYAaxnygRymYkaG6Z4sQpXD
RsLuqNHKolVYwhebwPmoOQX3oW5UMcDy7+NJ5DFl9lVoIa4BhbiJhu34ClTzgUp2
xfmIJgZSUL15q70HzJf9NOQUaoCg402Of9OMzIu0sARj53kLNc2XOavIaHOz9UZv
XNKdTQmgOV7kMKEon7Z68shbVSHETcv9UNrANnGMC1gTvhAuEj24T6mtB3NNfvtm
QiQeiRdAzeqTG6F7f9o2122MMSzH0OKsYUXUV4tP49VAZIKMptxuebvs5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAx5Lw2MmK8vF3dzsdRlLPzwjDR7MB8GA1UdIwQY
MBaAFA0pGSJYf3UPeKGXlcvYm8cprxfVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNrWklsaF9kUTk0b1plVnk5aWJ4eW12RjlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My80ZGY4ZjEtMjQxZC00MzM5LWIwZjYt
ZDY1YWQ0MzBiZWI3LzEvRFNrWklsaF9kUTk0b1plVnk5aWJ4eW12RjlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My80ZGY4ZjEtMjQxZC00MzM5LWIwZjYtZDY1YWQ0MzBiZWI3
LzEvRFNrWklsaF9kUTk0b1plVnk5aWJ4eW12RjlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVxjw2/PE
OwWjGctNTCyjySIdPgHQMS3NM5gls19dh6YP/6gfCMqPTSTWuA1vVM3LS72GmzWG
NK74rl7KlSDFF8+iddEyViysqpE4A0VXCqYH4Bq+xjH1F/BCN9WqOZEu1lUgpoPA
SW8XI5LJezgDz9TN+SSwEgwdtRwoj7qZff1gAKTnkNwjcCLLkKF7NBxWc9NTk3Ap
oYltaWzgyiUhEn+tc+0WgTA4qEbCkC0aIZUBH2jNuVJfR/dzAfJ9spNjvBpJ3w8U
M0EzRodullf8/OrRs3yh65gUovZVtE90JuuFiO056QcurSRHIK6P1qrq9KvNCgdM
jYR5ZuyWJErQKQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:30:44 2025 by rpki-client